A T Tg n . ATMED IS: 



Tg CLAIMED IS: 

,. A system for securing an application for execution on a computer, the 

system comprising: 

a server computer; 

a network; and . 

a chent computer operably connected to the server computer vra ore 

"^wherein the cUen. computer receives an app.ication from ft. server 

^"Therein the client computer execute, the application subsequent to 

receiving the application; and 

wherein the « computer includes an intercepfon moduie for 
intercepting a, leas, one network request from the apphcation, wherein the 
Perception module determines whefter the destination address is hsted rn a se 
of approved addresses, and wherein the interception moduie notifies a proxy 
the request is intercepted. 

2 . A method of securing an application for execution on a computer, the 

method comprising: , 
ntodifying a binary of the application such that a .quest from ft 
apphcation to transmit data over the ne^orx is intercepted, wherein the request 
identifies a destination address; and 

determining whefter the destination address is listed in a se. of approved 

addresses. 

3. The meftod of Claim 2, additionally comprising notifying a proxy that the 
request is intercepted. 
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application. 

s — 

if m ere is no entry » *• connection queue, blockrng 
entry in the connection queue. 

, u method additionally comprises, 

request and wherem the methoo a connection queue; 

aetennining^etherfl.ere.sanenttymaconn 

if .here is no entry in «- electron queue, retummg 
WieatingthaturereisnoentiyindteconnecUonqueue. 

^ and wherein the memod addition*.., compnses wnung 
tot isprovidedbydteapplicationintoasend queue. 

wterei n the method addi.ona.ly comprises - so* 

^nuttingto the apphcationaumque socket tdenuner. 
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fc ^thod of Claim 2, wherein the network request is a network bind 
10. The method of Claim x, nhfilsC ating the network 

address. 

,„ d „f Cain, 2 wherein the network request is a network connect 
11. The method of Claim A w indicating 

destination socket. 

* a of Oaim 2 wherein the network request is a network hsten 
12. The method of Claim z, w indicating 
, v, .in the method additionally comprises updating a status g 

-ons.mre.ote.— . 

*A^* — ° naCOmPUter ' ,he 
system comprising: wication such that a request from 

the application to transmit data over tne 

means for determining whether the desu 
approved addresses. 

, of cairn 14, additional* comprising means for notifying a 
15. The system of Claim 
25 proxy that the request is intercepted. 

16 The system of Claim i% W1 
reques t and wherein the method additionally comprises: 

means for determining whether there is an entry 
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(here is an entry in the connection queue. 

. „f Claim H wherein the network request is a netwo* send 
17. The system of Claim 14, w 
^ and wherein the method additionally compnses wnfng the con. 
that is provided by the application into a send queue. 

» dofClaiml4 whereto network request is a nemork receive 
18. The method of Claim w, wu 

, k ™ the method additionally comprises wntrng the contents 

rrn^i— -- — 

wherein me method additionally compnses recording <h 
emitting to ttieapplicationauniquesocketidennfier. 

. of Claim H wherein the netwotk request is a network hind 

20. The system of Claim 14, w „ hfilscati ns (he network 
^est and wherein the memod additionally comprises oh to ca«ng 

address. 

, „f Claim 14 wherein the network request is a network connect 

21. The system of Claim 14, wn indicating 

destination socket. 

, rf Claim 14 wherein the ntfwork request is a network listen 
22. The system of Claim 1*, w indicating 
re ,nes, and wherein the method additionally comprises updating stauis 



data. 
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24 . A JUL for securing an apphcation for execution on a computer, the 

m . ^ * trans-nit da. over the network is intercepted, where, the 
tucs, Lnes a destination address, herein Ore intercepts mo*. 
Lnne. whether the destination address is Usted in a - J 
anaresses, and wherein the interception rnoduie notifies a proxy that the reoues, 
is intercepted. 
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